felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add profile

Browse source
This commit is contained in:
Jeroen Rijken 2022-09-01 15:37:31 +02:00
parent 1665b0516f
commit 4a6c010242
2 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/profiles-s-z/update-secureboot-policy Normal file
View file

@ -0,0 +1,17 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Jeroen Rijken
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{,s}bin/update-secureboot-policy
profile update-secureboot-policy @{exec_path} flags=(complain) {
include <abstractions/base>
@{exec_path} rm,
/usr/share/debconf/frontend rPx,
include if exists <local/update-secureboot-policy>
}

1
apparmor.d/profiles-s-z/whereis
View file

@ -34,7 +34,6 @@ profile whereis @{exec_path} flags=(complain) {
/snap/bin/ r, /snap/bin/ r,
/var/lib/flatpak/exports/bin/ r, /var/lib/flatpak/exports/bin/ r,
owner @{HOME}/{.local/,}/{.,}bin/ r,
owner @{HOME}/.krew/bin/ r, owner @{HOME}/.krew/bin/ r,
owner @{HOME}/{.,}go/bin/ r, owner @{HOME}/{.,}go/bin/ r,
owner @{HOME}/{.local/,}{.,}bin/ r, owner @{HOME}/{.local/,}{.,}bin/ r,